$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/42c77934-aa52-31f5-9f48-d538a5ace7e8.roa File: 42c77934-aa52-31f5-9f48-d538a5ace7e8.roa (raw, json) Hash identifier: +zCzZhDCA7oQAd7cInZH/BVVJfaLmRCymOff5XY296s= Subject key identifier: B7:C9:45:DD:41:EB:18:28:95:DF:35:17:47:B9:08:CA:44:34:07:A3 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858491246DADCDC8FA951B7DE3C80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/42c77934-aa52-31f5-9f48-d538a5ace7e8.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 397242 IP address blocks: 156.154.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:da:dc:dc:8f:a9:51:b7:de:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=e6cb790a-f698-4194-b44d-888773cb723b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0a:7f:3d:ce:7b:b8:1b:86:e3:7e:e6:75:c9: f2:8c:ad:05:ab:99:29:6b:d7:57:c3:0a:32:23:39: 7f:3d:3e:b7:2f:65:29:fc:4e:84:4f:98:39:41:4a: 5a:10:f9:8c:cf:06:c6:41:15:c0:50:cb:f8:51:b5: 2b:7f:a3:ba:c7:e0:5e:2c:15:7b:91:45:7c:2a:88: 52:d3:d0:8f:eb:ef:43:89:48:c4:84:64:ad:c9:b5: a3:1c:c8:90:03:d6:63:23:fa:9a:1c:c0:f4:a1:8f: 8a:e7:77:53:3e:cc:83:cb:ca:69:5a:a7:c3:27:60: f6:d5:9c:74:ec:f7:5e:ac:9f:b9:d9:47:bd:8f:80: 0f:27:86:8a:64:59:7c:e2:51:0e:67:55:60:9d:d1: 91:e6:17:90:fd:73:f9:be:0e:3a:5d:6c:2c:98:6b: 35:66:01:91:d7:12:ec:f8:f5:6f:3a:4e:83:65:ef: cf:90:2b:46:12:32:53:b5:14:77:38:5e:5a:f6:c7: 75:61:ce:67:2a:87:24:6f:eb:a3:3f:16:db:e1:9d: b2:37:a4:bc:6a:50:1b:a2:3b:6c:fb:0b:15:28:87: c0:41:6a:87:18:ad:8d:8c:00:ed:2d:46:76:3c:56: 61:b3:a2:77:f3:b8:ae:d3:1b:50:ab:d6:7a:f0:9e: 11:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:C9:45:DD:41:EB:18:28:95:DF:35:17:47:B9:08:CA:44:34:07:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/42c77934-aa52-31f5-9f48-d538a5ace7e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:0a:6a:bd:39:1c:5f:f3:68:41:9a:da:c2:04:82:7e:9e:34: a2:c1:0d:ef:c8:82:d9:7f:f4:22:37:be:3a:01:62:7a:2a:ab: 70:05:3e:2d:d5:b0:4d:5b:38:fc:f8:f6:3e:b0:cb:63:e6:6a: a3:b5:32:98:05:91:fa:8d:fc:8c:50:85:0d:28:4a:0c:62:6e: 2a:ed:04:95:9b:bc:54:62:92:42:4d:48:f0:1a:0e:42:2b:23: 1a:4c:23:06:0c:2c:3e:bf:fb:11:0c:3c:85:7b:25:71:17:01: 68:61:3e:8b:d6:73:9e:cd:de:bb:73:86:b8:66:10:77:3f:b2: d6:92:38:4a:87:64:0e:29:b1:ae:3b:a6:a2:36:47:d7:b9:73: 59:f5:7f:50:b9:40:5e:dc:c8:59:3d:94:c2:26:17:1d:24:e8: a5:80:16:b5:0e:ca:4a:81:0b:a0:32:eb:38:e2:11:44:d4:5b: 2d:2b:0c:c9:83:25:f3:79:04:e0:08:05:50:21:24:9e:60:8b: 9a:a3:a5:77:f0:bc:a8:50:e3:12:d1:39:66:6a:75:cc:d2:95: de:5c:4e:b6:95:11:ac:fc:0a:06:3d:71:f6:b0:7c:3b:95:52: 01:c6:a3:27:5d:50:a9:ab:c4:1b:d4:90:13:cd:8d:8d:2b:6d: ef:ba:e7:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRtrc3I+pUbfePIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk ZTZjYjc5MGEtZjY5OC00MTk0LWI0NGQtODg4NzczY2I3MjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQp/Pc57uBuG437mdcnyjK0Fq5kpa9dXwwoy Izl/PT63L2Up/E6ET5g5QUpaEPmMzwbGQRXAUMv4UbUrf6O6x+BeLBV7kUV8KohS 09CP6+9DiUjEhGStybWjHMiQA9ZjI/qaHMD0oY+K53dTPsyDy8ppWqfDJ2D21Zx0 7PderJ+52Ue9j4APJ4aKZFl84lEOZ1VgndGR5heQ/XP5vg46XWwsmGs1ZgGR1xLs +PVvOk6DZe/PkCtGEjJTtRR3OF5a9sd1Yc5nKockb+ujPxbb4Z2yN6S8alAbojts +wsVKIfAQWqHGK2NjADtLUZ2PFZhs6J387iu0xtQq9Z68J4REQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLfJRd1B6xgold81F0e5CMpENAejMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNDJjNzc5MzQtYWE1Mi0z MWY1LTlmNDgtZDUzOGE1YWNlN2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQKar05HF/zaEGa2sIEgn6eNKLBDe/Igtl/9CI3vjoBYnoqq3AFPi3V sE1bOPz49j6wy2PmaqO1MpgFkfqN/IxQhQ0oSgxibirtBJWbvFRikkJNSPAaDkIr IxpMIwYMLD6/+xEMPIV7JXEXAWhhPovWc57N3rtzhrhmEHc/staSOEqHZA4psa47 pqI2R9e5c1n1f1C5QF7cyFk9lMImFx0k6KWAFrUOykqBC6Ay6zjiEUTUWy0rDMmD JfN5BOAIBVAhJJ5gi5qjpXfwvKhQ4xLROWZqdczSld5cTraVEaz8CgY9cfawfDuV UgHGoyddUKmrxBvUkBPNjY0rbe+65zo= -----END CERTIFICATE-----Generated at Sun Apr 6 06:02:02 2025 by rpki-client